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IN THE CLAIMS: 

Amended claims follow: 

L (Currently Amended) A load balancing device for balancing the load across a 
plurality of proxy devices arranged to perform malware scanning of files stored within a file 
storage device of a compxiter network, the computer network having a plurality of client 
devices ananged to issue access requests using a dedicated file access protocol to the file 
storage device in order to access files stored on tiie file storage device, the load balancing 
device being arranged so as to intercept access requests issued to the file storage device, and 
comprising: 

a client interface for receiving an access request issued to the file storage device 
using the dedicated file access protocol; 

load balancing logic for applying a predetermined load balancing routine to 
determine to which proxy device to direct that access request; and 

a proxy device interface for sending the access request to the proxy device 
determined by the load balancing logic, each proxy device being coupled to the file storage 
device; 

wherein said oroxv devices are arranged to perform said malw are scanning of 
files stored within the file storage device, and the load balancing dev ice determines to 
which of said pluralitv of nroxv devices to direct any partic ular access request: 
wherein each mox v device comprises: 

f a> a first interface for receiving from the load balancing device an 
access request issued bv one of said client devices to said file storag e device 
using the dedicated 61e access protocol: 

fbl a second interface for coflamunicati np with the file storage device to 
cause the file storage device to process the access request 
(c\ processing logic for causing selected ma lware scanning algoritbmsto 
be executed to determme t\1iedler the file identified bv the a ccess request is 
to be considered as malware: 
wh^ein, upon receipt of an access request, the proc essmg logic is arranged to 
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determine from the access request predetermined attributes, and to send those piede tennined 
attributes to the file storage device to enable the file storage device to p erform a validation 
check, the processing logic only allowing the access request to proceed if the fil e storage 
Havice confirms that the client device is aUowed to access the file ident ified bv the file 
access request 

wherein a user cache is utilized for storing the predete rmined attributes. 

2. (Original) A load balancing device as claimed m Claim 1, wherein the dedicated file 
access protocol is the Server Message Block (SMB) protocol, and the access requests are 
SMB calls issued to the file storage device. 

3. (Original) A load balancing device as claimed in Claim 1, wherein the dedicated file 
access protocol is the Network File System (NFS) protocol, and the access requests are NFS 
calls issued to the file storage device. 

4. (Original) A load balancing device as claimed in Claim 1 , wherein said load 
balancing routine is arranged, upon receipt of an access request, to poll each of the plurality 
of pix)xy devices, and to cause the access request to be sent to the first proxy device in said 
plurality that replies with an indication that it is available to handle the access request. 

5. (Original) A load balancing device as claimed in Claim 1 , wherein said load 
balancing routine is arranged to apply a "round robin" system of allocation of access 
requests to pro3cy devices in said plurality so as to evenly distribute tfie access requests 
amongst the plurality of proxy devices. 

6. (Original) A load balancing device as claimed in Claim 1 , wherein the proxy device 
interface is arranged to receive a ready signal fi-om each proxy device in said plurality 
indicating whether that proxy device is ready to receive an access request, the load 
balancing roxitine being arranged to refer to said ready signals when determining to whidi 
proxy device to direct a particular access request. 
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7. (Original) A load balancing device as claimed in Claim 1 , wherein each device in 
the computer network is assigned an identifier, and the load balancing device is assigned the 
same identifier as is assigaed to the file storage device, the client interface being connectable 
to a communication ixifirastnicture of the computer netwoxk to wable communication 
between the load balancing device and said client devices, vMlst the plurality of proxy 
devices are connectable to the proxy device interface and the file storage device is 
connectable to each proxy device, such that the file storage device is only accessible by said 
client devices via said load balancing device and one of said proxy devices. 

8. (Original) A load balancing device as claimed in Claim 7, wherein a plurality of file 
storage devices may be connected to each of said proxy devices, each file storage device 
having a different identifier, and the load balancing device being assigned multiple 
identifiers corresponding to the identifiers of the file storage devices connected to the 
plurality of proxy devices, the client interface being configured to receive any access 
requests issued to one of said file storage devices connected to the plurality of proxy 
devices. 

9. (Original) A load balancing device as claimed in Claim 1 , wherein each device in 
the computer network is assigned an identifier^ the load balancing device being assigned a 
unique identifier difierent to the identifier of the file storage device, the client devices, the 
load balancing device and the file storage device being connectable to a communication 
infiastructure of the computer network^ the client devices being configured such that access 
requests issued by the client devices are routed to flie load balancing device, and the file 
storage device being configured to retum each processed access request to die proxy device 
from which that access request was received. 

10. (Cancelled) 

1 1 . (Cun^ntly Amended) A balanced proxy system as claimed in Claim 1 [0], wherein 
the processing logic is responsive to configuration data to determine which malwarc 
scanning algorithms should be selected for a particular file, each proxy device further 
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comprising a scatining engine to execute the malware scanning algorithms selected by the 
processing logic. 

12. (Currently Amended) A balanced proxy system as claimed in Claim 1 [0], wherein 
each proxy device further comprises a file cache for storing files previously accessed by Ihe 
client devices, upon receipt of an access request identifying a file to be read fixjm the file 
storage device, the processing logic being arranged to determine whether the file identified 
by tiie access request is stored in the file cache and if so to return the file to the client device 
via tfie load balancing device without communicating with the file storage device via the 
second interface. 

13. (Original) A balanced proxy system as claimed in Qaim 12, wherein the file cache 
is arranged only to store files which have been determined not to be considered as malware. 

14. -15.(CanceUed) 

1 6. (Currently Amended) A method of operating a load balancing device to balance the 
load across a plurality of proxy devices arranged to perform malware scanning of files 
stored within a file storage device of a computer network, the computer network having a 
plurality of client devices arranged to issue access requests using a dedicated file access 
protocol to the file storage device in order to access files stored on the file storage device, 
the load balancing device being arranged so as to intercept ajccess requests issued to the file 
storage device^ aiui the method comptising the steps of: 

(a) receiving an access request issued to the file storage device using the dedicated file 
access protocol; 

(b) applying a predetermined load balancing routine to determine to which proxy device 
to direct diat access request; and 

(c) seiKling ttie access request to ihs proxy device determined at said step (b), 
each proxy device being coupled to the file storage device; 

wherein said proxy devices are arranged to perform said malware scanning of 
files stored within the file storage device, and the load balancing device determines to 
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which of said plmralitv of proxy devices to direct any ^articular access request; 
wherein each proxy device comprises: 

(a ) a first interface for receiving from the load ba lancing device an 
access request issued bv one of said client devices to said file storage device 
using the dedicated file access protocol: 

(V) a second interface for communicatinp with the file storag e device to 
cause the file storage device to process tfie access request: 
(c\ processing logic for causing selected malware sca^ itig alfrnrfthms to 
be executed to detennine whether the file identified bv the access request is 
to be considered as malwatre: 
wherein^ upon receipt of an access request, the processing logic is arr anged to 
determine from the access request predetermined attributes, and to s end those predetermmed 
attributes to the file storage device to enable the file storage device to T ^erfonn a validation 
check, the processing logic only allowing the access request to proceed if the file storage 
device confirms that the client device is allowed to access the file ident ified bv the file 
access request: 

wherein a user cache is utilized for storing the predetermined attributes . 

17. (Original) A method as claimed in Claim 16, wherein the dedicated file access 
protocol is fte Server Message Block (SMB) protocol, and the access requests are SMB 
calls issued to the file stotage device. 

1 8 . (Original) A method as claimed in Clahn 1 6, wherein the dedicated file access 
protocol is the Network File System (NFS) protocol, and the access requests arc NFS calls 
issued to the file storage device. 

19. (Original) A method as claimed in Claim 16» wherein said load balancing routine is 
an-anged, upon receipt of an access request, to poll each of fiie plurality of proxy devices, 
and to cause the access request to be sent to the first proxy device in said plurality that 
replies wi& an indication that it is available to handle the access request 
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20. (Original) A method as claimed in Claim 16, ^^erein said load balancitig routine is 
arranged to apply a "tound robin" system of allocation of access requests to proxy devices in 
said plurality so as to evenly distribute the access requests amongst the plurality of proxy 
devices- 

2 1 . (Original) A method as claimed in Claim 1 6, wherein die toad balancing device is 
arranged to receive a ready signal from each proxy device in said plurality indicating 
"Whether that proxy device is ready to receive an access request, the load balancing routine 
being arranged to refer to said ready signals when determining to which proxy device to 
direct a particular access request 

22. (Original) A method as claimed in Claim 16. wherein each device in the computer 
network is assigned an identifier, and the load balancing device is assigned the same 
identifier as is assigned to the file storage device, the method comprising the steps of: 

connecting a client interface of the load balancing device to a communication 
infrastructure of the computer network to enable communication between the load balancing 
device and said client devices; 

connecting the plurality of proxy devices to a proxy device interface of the load 
balancing device; and 

cormecting the file storage device to each proxy device, such that the file storage 
device is only accessible by said client devices via said load balancing device and one of 
said proxy devices. 

23. (Origmal) A method as claimed ui Claim 22, wherein a plurality of file storage 
devices iiiay be connected to each of said proxy devices, each file storage device having a 
different identifier, and the load balancing device being assigned multiple identifiers 
corresponding to the idratificrs of the file storage devices connected to the plurality of proxy 
devices, the client interface being configured to receive any access requests issued to one of 
said file storage devices connected to the plurality of proxy devices. 

24. (Original) A method as claimed in Claim 16, \^erein each device in the computer 
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network is assigned an identifier^ the load balancing device being assigned a unique 
identifier different to the identifier of the file storage device, tibie method comprising the 
steps of: 

connecting the client devices, the load balancing device and the file storage device to 
a conrnnmication infi'astructure of the computer network; 

configuring the client devices such that access requests issued by the client devices 
arc routed to the load balancing device; and 

configuring the file storage device to return each processed access request to the 
proxy device fix>m which that access request was received. 

25. (Cancelled) 

26. (Currently Amended) A method as claimed in Claim [23]I6, wherein said step (iii) 
comprises the steps of: 

responsive to configuration data, determining which malware scanning algorithms 
should be selected for a particular file; and 

employing a scanning engine to execute the malware scanning algorithms selected 
by said determining step. 

27. (Currently Amended) A method as claimed in Claim [25126, wherein each proxy 
device is arranged to perform the fiather steps of: 

storing within a file cache files previously accessed by the client devices; 

upon receipt of an access request identilying a file to be read firom the file storage 
device, determining whedier the file identified by the access request is stored in the file 
cache and if so to retum the file to the client device via the load balancing device without 
communicating with the file storage device. 

28. (Original) A method as clahned in Claim 27, wherein the file cache is arranged only 
to store files which have been determined not to be considered as malware. 

29. -30. (Cancelled) 
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3 1 . (Currently Amended) A con^xrter program embodied in a computer-readable 
medium for configuring a load balancing device to perfomi a method of balancing the load 
across a plurality of proxy devices arranged to perform malware scanning of files stored 
within a file storage device of a computer network, the computer network having a plurality 
of client devices arranged to issue access requests using a dedicated file access protocol to 
the file storage device in order to access files stored on the file storage device, the load 
balancing device being arranged so as to intercept access requests issued to the file storage 
device^ and the computer program embodied in a computer-readable medium comprising: 

(a) client interface code operable to receive an access request issued to the file storage 
device using the dedicated file access protocol; 

(b) load balancing code operable to apply a predetermined load balancing routine to 
determine to which proxy device to direct that access request; and 

(c) proxy device interface code operable to send the access request to the proxy device 
determined by the load balancing logic, each proxy device being coupled to the file storage 
device^ 

wherein said proxy devices are arranged to perform said malware scanning of 
files stored within the file storage device: and the load balancing device determines to 
which of said plurality of proxy devices to direct any particular access request: 

wherein each proxy device comprises: 

fa) a first interface for receiving from the load balancing device an 
access request issued bv one of said client devices to said file storage device 
using the dedicated file access protocol: 

fb) a second interface for cftmTntini cating with the file storage device to 
cause the file storage device to process the access reauest 

(c) processing logic fo r causing selected malware scanmng algorithms to 
be executed to determine whether the file identified bv the access request is 
to be considered as malware: 
wherein, upon receipt of an access requests the processing logic is arranged to 
determine from the access request predetermined attributes, and to send those predetermined 
attributes to the file storage device to ensJjle the file storage device to perform a validation 



PAGE 12/22 ' RCVD AT imOOS 7:58:45 PM [Eastern Dayfight 



OCT. 13:2005 *5:11PM 2ILKA-K0TAB. PC 

-10- 



NO.0591 P. 13 



check, the lyrooessmg lo^ic only aJ lnwinp thes access request to proceed if the file storage 
device coofit^fi that ifae client device is allowed to access ttie file identified by the file 
access request 

wherein a user cache is utilized for storing the predetermined attribtdes . 

32 . (Previously Presented) A computer program ^bodied in a computer-readable 
medium as claimed in Claim 31, wherein the dedicated file access protocol is the Server 
Message Block (SMB) protocol, and the access requests are SMB calls issued to the file 
storage device. 

33 . (Previously Presented) A computer program embodied in a computer-readable 
medium as claimed in Claim 31, wherein the dedicated file access protocol is the Network 
File System (NFS) protocol, and the access requests are NFS calls issued to the file storage 
device. 

34. (Previously Presented) A computer program embodied in a computer-readable 
medium as claimed in Claim 31, wherein said load balancing routine is arranged, upon 
receipt of an access request, to poll each of the plurality of proxy devices, and to cause the 
access request to be sent to the first proxy device in said plurality that replies with an 
indication that it is available to handle the access request. 

35 • (Previously Presented) A computer program embodied in a computer-readable 
medium as claimed in Claim 31, wherein said load balancing routine is arranged to apply a 
'"round robin" system of allocation of access requests to proxy devices in said plurality so as 
to evenly distribute tiie access requests amongst the plurality of proxy devices. 

36. (Previously Presented) A computer program embodied in a oon5)uter-readable 
medixim as claimed in Claim 3 1 , wherein the load balancing device is arranged to receive a 
ready signal fix)m each proxy device in said plurality indicating whether that proxy device is 
ready to receive an access request, the load balancing routine being airanged to refer to said 
ready signals when determining to which proxy device to direct a particular access request 
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37. (Previously Presented) A computer program embodied in a computer-readable 
medium as claimed in Claim 3 1 , wherein each device in the computer network is assigned 
an identifier, and the load balancing device is assigned the same identifier as is assigned to 
the file storage device, a client interface of the load balancing device being connectable to a 
conmiunication infiastructure of the computer network to enable communication between 
the load balancing device and said client devices, whilst the plurality of proxy devices are 
connectable to a proxy device interface of the load balancing device and the file storage 
device is connectable to each proxy device, such that the file storage device is only 
accessible by said client devices via said load balancing device and one of said proxy 
devices. 

38. (Previously Presented) A computer program embodied in a computer readable 
medium as claimed in Claim 37, wherein a plurality of file storage devices may be 
connected to each of said proxy devices, each file storage device having a different 
identifier, and the load balancing device being assigned multiple identifiers corresponding to 
the identifiers of the file storage devices connected to the plurality of proxy devices, the 
client interface code being operable to receive any access requests issued to one of said file 
storage devices connected to the plurality of proxy devices. 

39. (Previously Presented) A computer program embodied in a computer-readable 
medium as claimed in Claim 3 1 , wherein each device in the computer network is assigned 
an identifier, the load balancing device being assigned a unique identifier different to the 
identifier of the file storage device, the client devices, the load balancing device and the file 
Storage device being connectable to a communication ixi&astmcture of the computet 
network, the client devices being configured such that access requests issued by the client 
devices are routed to the load balancing device, and the file storage device being coxifigured 
to return each processed access request to the proxy device firom which that access request 
was received. 

40. (Canceled) 
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4 1 . (Currently Amended) A computer program embodied in a computer-readable 
medium as claimed in Claim [40]31, wherein said algorithm invoking code is operable to 
determine, responsive to configuration data, which malware scanning algorithms should be 
selected for a particular file^ and the second computer program product further comprises 
scannmg engine code responsive to said algorithm invoking code and operable to execute 
the malware scanning algorithms selected by said algorithm invoking code. 

42. (Cunently Amended) A compxiter program embodied in a computer-readable 
medium as claimed in Claim [40]3I, wherein said second computer program embodied in a 
computisr-readable medium further comprises: 

caching code operable to store within a file cache files previously accessed by the 
client devices; 

the reception code being operable, upon receipt of an access request identifying a 
file to be read from the file storage device, to determine whether the file identified by the 
access request is stored in the file cache and if so to jietum the file to the client device via the 
load balancing device without communicating with the file storage device. 

43 . (Previously Presented) A computer program embodied in a computer-readable 
medium as claimed in Claim 42^ wherein the file cache is arranged only to store files which 
have been determined not to be considered as malware. 

44. -45. (Cancelled) 
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